PROVING THE BIRCH AND SWINNERTON-DYER 
CONJECTURE FOR SPECIFIC ELLIPTIC CURVES 
OF ANALYTIC RANK ZERO AND ONE 
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Abstract. We describe an algorithm to prove the Birch and Swinnerton- 
Dyer conjectural formula for any given elliptic curve defined over the rational 
numbers of analytic rank zero or one. With computer assistance we have 
proved the formula for 16714 of the 16725 such curves of conductor less than 
5000. 



1. Introduction 

Let E be an elliptic curve defined over Q, given by a global minimal Weierstrass 
equation. We denote the identity of E by 0, the rank of the Mordell-Weil group 
E(Q) by r and the conductor of E by N. For each prime p, let c p {E) be the 
Tamagawa number at p and let a p = p + 1 — #E(W P ) where E(¥ p ) is the mod-p 
reduction of E. Let L(E/Q,s) be the Hasse-Weil L-function of E, and denote 
its order of vanishing at s — 1 by r an (E/Q). The regulator of E(Q) is denoted 
Reg(-E(Q)). With u denoting the minimal invariant differential let Q(E) — J E ^ M 
be the real period (the least positive real element of the canonical period lattice A) 
times the order of the component group of E(M) and let ||w|| 2 = J E n^) ^ A be 
twice the area of the fundamental domain of A. Denote the Shafarevich-Tate group 
by IH(Q, E) and for G a group let G t0 rs denote its torsion subgroup and let G/ tors 
denote the quotient group G/Gt ota . 

The Birch and Swinnerton-Dyer conjecture states that: 

(1) The rank r is equal to the analytic rank r an (E/Q). 

(2) The Shafarevich-Tate group is finite. 

(3) The leading coefficient of the Taylor series of L(E/Q,s) at s = 1 is given 
by the formula: 

LM(E/Q,1) _ n(E)-U p c P (E)-Reg(E(Q))-#Ul(Q,E) 

r\ ~ #£(Q)?ors 

The first part of the conjecture, known as the rank conjecture, is one of the 
Clay Mathematics Institute's Millenium Prize Problems |3B]. It is known that if 
r an (E/Q) < 1 then the rank conjecture holds and the Shafarevich-Tate group is 
finite. It is worthy to note that #LU(Q, S) an , the value of #HI(Q, E) for which 
the conjectural formula holds, is not even known to be a rational number for a 
single curve such that r an (E/Q) > 1. In this note we describe an algorithm which 
computes the order of the Shafarevich-Tate group of any elliptic curve E such 
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that r an (E/Q) < 1- This either proves the full conjecture for E or produces a 
counterexample. We also report the results of computer calculations which prove 
the conjecture for 16714 of the 16725 such curves of conductor less than 5000. 

Definition 1.1. We denote by BSD(E/Q,p) the following assertions: 

(1) The rank r is equal to the analytic rank r an (_E/Q). 

(2) The p-primary part IH(Q, E)(p) of the Shafarevich-Tate group is finite. 

(3) The real number #IH(Q, E) an is rational. 

(4) The conjectural formula holds at p, i.e., 

ord p (#III(Q,£;) an ) = ord p (#IH(Q,.E)(p)) ■ 

We also denote BSD(E,p) = BSD(_E/Q,p), and note that there is a definition of 
BSD(E / K,p) for global fields K in general- see, e.g., [32] for a definition. 

If r an (E/Q) < 1 then all but the last part of BSB(E/Q,p) is known, so in 
this case BSD(E/Q,p) is equivalent to the last equality. Clearly the Birch and 
Swinnerton-Dyer conjecture holds if and only if for each prime p, BSD(E/Q 1 p) is 
true. The rank conjecture has been verified for E/Q of conductor N < 130,000 

rrj. 

By the modularity theorem [351 13] , every elliptic curve E defined over Q has 
a modular parametrization ip : Xq(N) — > E. If for each isogenous curve E' with 
modular parametrization ip' : Xq(N) — > E' we have that ip' — ip o ip for some 
isogeny ip then we say that E is an optimal elliptic curve, often called a strong Weil 
curve in the literature. Every elliptic curve over Q has an optimal elliptic curve in 
its isogeny class and by the characterizing property this curve is unique. Thus we 
can use optimal curves as isogeny class representatives and, by isogeny invariance 
of BSD(_E,p) [6], focus on optimal curves. 

Theorem 1.2. Suppose E/Q is an elliptic curve of (analytic) rank at most 1 and 
conductor N < 5000. If p is a prime such that E[p] is irreducible then BSD(E,p) 
holds. If E[p] is reducible and the pair (E,p) is not one of the 11 pairs appearing 
in Tabled then BSD(_E,p) holds. 

Note that this gives the full Birch and Swinnerton-Dyer conjecture for 16714 
curves of the 16725 of rank at most one and conductor at most 5000. The remaining 
cases will be treated by a forthcoming paper by Michael Stoll and the author- see 
Section [8] for more details. This note was inspired by [21] . 

Whenever we prove a theorem with the help of a computer questions regarding 
errors both in hardware and software arise. Any computer-assisted proof implicitly 
includes as a hypothesis the statement that the software used did not encounter any 
bugs (hardware or software errors) during execution. Few software programs for 
serious number theory research have been proven correct. However it is often noted 
in the literature, as it is in Birch and Swinnerton-Dyer's seminal note [3] itself, 
that the kind of algorithms which occur in number theory (and more importantly 
the errors computational number theorists are likely to make implementing them) 
are often of a very particular sort. Either the software will work correctly or very 
quickly fail in an obvious way — perhaps it will crash or give answers that make 
no sense at all. In fact the computational work behind the theorems of Section [7] 
uncovered several bugs (which have all been fixed). There are sometimes different 
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implementations of the same algorithm or even different algorithms which imple- 
ment the same theory. For example, the author used four different implementations 
of 2-descent to verify the computational claims of Theorem 17.11 

Throughout, E will denote an elliptic curve defined over Q, and we will be mainly 
interested in curves of rank and 1. For such a curve, the Birch and Swinnerton- 
Dyer conjectural formula is known to hold up to a rational number, and sections 2 
through 4 explain this result in such a way as to make it explicit. Sections 5 and 
6 discuss what to do with the remaining primes and Section 7 contains the proof 
of Theorem 11.21 Section 8 discusses the remaining cases, which all have reducible 
mod-p representations. 

The author wishes to thank John Cremona, Tom Fisher, Ralph Greenberg, Dim- 
itar Jetchev, William Stein, Michael Stoll and Christian Wuthrich for their helpful 
comments and encouragement. 

2. Quadratic twists 

Below we will need to use several properties of the quadratic twist E d of the 
elliptic curve E by a squarefree integer d $ {0, 1}, so we establish these here. For 
any number field F let Gf denote its absolute Galois group. Suppose E is an 
elliptic curve over Q given in standardized (ai,a 3 6 {0,1} and a 2 € { — 1,0,1}) 
global minimal Weierstrass form 

E : y 2 + aixy + a^y = x 3 + a 2 x 2 + a^x + a§ . 

The curve E d can then be presented in the following Weierstrass form, which is not 
necessarily minimal: 

E d : y 2 + a\xy + a^y = x 3 

+ (a 2 d + al{d- l)/4) x 2 

+ (a 4 d 2 + aia 3 (d 2 - l)/2) x 

+ a 6 d 3 + aj(d 3 - l)/4. 

Put K = Q(9) where 9 2 = 1/d and note that the curves are related by the K- 
isomorphism: 

The L-series of E/K, E/Q and E d /Q are related by the formula: 
L(E/K, s) = L(E/Q, s) ■ L(E d /Q, s) . 

Define as usual 

b 2 = af+ 4a 2 , c 4 = b\ - 246 4 , 

&4 = 2a 4 + ai<i3 , cq = b 3 , + 36^2^4 — 216^6 , 

b 6 = a 3 + 4a 6 , A= (c^ - c§)/1728 , 

noting that A is the minimal discriminant of E, hence ui = dx/(2y + a±x + 03) is 
the minimal invariant differential of E. Let A' be the minimal discriminant of E d , 
let sig(-E) = (ord 2 (c4), ord2(c6), ord2(A)) and for each prime p let 

A p = min{3ord p (c4), 2ord p (c6), ordp(A)} . 

The following proposition is a correction of [9j Prop. 5.7.3]: 
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Proposition 2.1. For each prime p \ 2d define S p as follows: 

(1) If p is odd, then define 8 P = 1 if either X p < 6 or if p = 3 and ord p (cg) = 5. 
Otherwise define 8 p = — 1. 

(2) Ifd=l (mod 4) then S 2 =0. 

(3) // d = 3 (mod 4) then 

• 8 2 = 2 if sig(E) = (0, 0, •) or (•, 3, 0), 

• 8 2 = -2 i/ siff(-B) = (4,6,c) witt c > 12 and 2~ 6 c 6 d = -1 (mod 4), 
or if sig(E) = (a, 9, 12) wi£/i a > 8 and 2~ 9 c^d = 1 (mod 4) and 

m 62 = otherwise. 

(4) If d ee 2 (mod 4) t/ien 

. & = 3 tf«fc(#) = (0,0,-), 

• § 2 = -3 if siff(^) = (6, 9, c) wni/i c > 18 and 2" 10 c 6 (i ee -1 (mod 4), 

• 8 2 = 1 i/ord 2 (c 4 ) G {4,5}, or i/ord 2 (c 6 ) G {3,5,7}, or if sig(E) = 
(a, 6, 6) with a > 6 and 2~ 7 cgd ee —1 (mod 4) and 

• 8 2 = — 1 otherwise. 

Then 

A' = Ao" 6 w/iere (5 = d) = JJ p 5 * . 

The invariant differential u>d associated to the given Weierstrass equation for E d 
has pullback p*iOd = 9uj by |38l p. 49], and it may not be minimal. In fact, if A^ is 
the discriminant of the above equation for E d then 8 12 Ad = A. Since A = A'S~ 6 
we have (5/d) 6 Ad — A'. The transformation taking E d to its minimal model must 
be defined over Q so \8/d\ G Q must be a square (or one can just read this off from 
the above proposition) and if ui 1 is the minimal invariant differential of E d then 
±\8/d\~ 1 / 2 LUd = u/. Finally since tp*oj' — ±\8/d\~ 1 / 2 6uj we find the relationship 
between the canonical period lattices of E and E d : 

A d ^\s/d\-^ 2 eA. 

Let a denote the nontrivial element of G = Gal(i^/Q). Define an action of 
G on H^K^E) by setting £ CT (r) = ^(ara^y for r G G K and {£} a = {£ CT }. Let 
EiK)*, H X {K, E)± denote the ±l-eigenspaces ofE(K), H X {K, E), respectively. By 
the definition of E d (see [38l X §2]) we have that tp° = [-1] o tp. Then for P G E(K) 
we have 

P a = ±P => <p(P) a = <p a (P a ) =T<P(P), 
and for £ : Gk —> E representing a cocyle class {£} G H 1 ^, E) we have 

which show that y> exchanges with J5(if)~ and #) + witn ^H^i 

The following lemma gives a relationship between the Mordell-Weil groups E(Q), E d (Q) 
and 

Lemma 2.2. We have E(Q) = E(K) + and under tp 1 we may identify E (Q) = 
E{K)~ . Under this identification we have: 

(1) TVie intersection is two torsion: 

E(Q)nE d (Q) = E(Q)[2], 

(2) if E(K) has rank r and E(K)[2] has ranks, then 

[E(K) /tms : (E(Q) +E d (Q)) /tms ] < 2 r 
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and 

[E(K):E(Q) + E d (Q)]<2 r+s ; 
(3) if E(K) has rank 1, E(Q) has rank and E(Q)[2] = 0, then 

E(K) /toIS = E d (Q) /tors . 

Proof. The identifications are by definition and the above observations. 

(1) Note that P e E(K)+ n E{K)~ is equivalent to P = P a = -P. 

(2) Let P e E(K) and note that 

2P=(P + P a ) + (P- P a ) e £(if ) + + ^C^T- 
Therefore since 2E(K) C £?(if )+ + £7(if) _ we have that 
[£(if)/ tors : (£(if)+ + £(if)-) /tors ] < [£(if) /tors : 2E(K) /toIS ] = 2 r 
and 

[E{K) : E{K)+ + E(K)~] < [E{K) : 2E{K)] = 2 r+s . 

(3) Choose P such that E(K) = IP® E(K) tOTS . We have that T := P a + P G 
E(K) + must be torsion, so choose a, b so that the order of T is 2 fc (2a + 1). 
With W = P + aT we have that 

W + W = P a + aT + (P + aT) = P a + P + 2aT = (2a + 1)T 

must be in E(Q)(2) which is trivial since E(Q)[2] = 0. Thus W G E(K)~ 
and since W = P modulo torsion we have E(K)/ tOTS = E(K)J tors . 

□ 

Recall the (exact) inflation-restriction sequence: 

-> H 1 (if /Q, E{K)) H H 1 (Q, £7) " s ff 1 (X, £) . 

Lemma 2.3. f/p to a finite 2-group we may identify H 1 (Q,E) — if 1 (if, E) + and 
H 1 (Q,E d ) = H X {K,E)-. 

(1) H l (K/Q, E(K)) is a finite 2-group. 

(2) The image of £7) /ies mtfim if 1 (If, £?)+. 

(3) The quotient H l {K,E)/(H 1 {K,E)+ + H l {K,E)-) is a 2-group. 

Thus if III (if , E) is finite then up to a factor of 2, 

#HI(if, E) = #HI(Q, £) • #ffl(Q, E d ) . 

Proof. We prove the first identification by establishing claims (1) and (2). The 
second comes from the analogous inf-res sequence for E d together with the fact 
that if takes ff 1 ^, £)" to H 1 (K,E d )+. 

(1) A cocycle £ : G — > £7 (if) is determined by the image of cr and since = 
£(1) =£(<7)+£(<7)* we havener) G £(if)". Since 2£ (a) = (£(<r) + £(<r) CT ) + 
(£,( (T ) ~ £( <T ) <7 ) — C( (T ) — ^( |7 ) <T every cocycle class is of order 2. Thus 
i£ 1 (if/Q, £7 (if )) is a 2-group which is a quotient of E(K)~ and hence a 
finite 2-group. 



6 



R.L. MILLER 



(2) Suppose tp is a cocycle class representative in the image of the restriction 
map. Then there is a {£} £ H 1 (Q,E) such that £\g k = V 7 - Then one 
calculates for r e G^: 

^(T)-^(T)=^(ara) CT -C(T) 

= (ew+^rr-c(r) 
= a(<?) T -a°)- 

(3) For {£} G H l {K,E) we have 2£ = (£ + + (£- D- 

□ 

The following lemma is a generalization of a formula which appeared in |22| p. 
312] without proof. 

Lemma 2.4. Suppose d < is a square-free integer. Then with S = S(E, d) as 
defined above, we have: 

Sl(E) ■ Q{E d ) ■ 5 1/2 = [E(M) : E°(R)} • ||w|| 2 . 

Proof. Let x be the least positive real element of the period lattice A, and choose a 
fundamental domain for A with base [0, i]cl and upper left corner with positive 
imaginary part y and real part in [0,2:). Then Q(E)/[E(R) : E°(R)] = x and 
||o;|| 2 = 2xy. We compute 

8 1 ^n{E d ) = 8 1 ' 2 ( W\= I ^Vcyi-/ H = 2y. 
JE d (R) Je(C)- Je(C)- 

The claim follows. □ 



3. Complex Multiplication 

Let E be an elliptic curve over Q, let R denote the endomorphism ring End(_E/C), 
let K denote its field of fractions and let Autfj(E[p\) denote the set of automor- 
phisms of E[p] commuting with the action of R. Consider the map ~p E p : Gq — > 
Aut(E[p\), which we call the mod-p Galois representation. 

If E does not have complex multiplication, then R = Z, K = Q and the groups 
Aut r(E[p\) and Aut (E[p\) = GL 2 (F p ) are identical. If E does have complex mul- 
tiplication, then R is an order in the quadratic imaginary field K and we have 
Pe, p \g k '■ Gk — > AutB.{E[p\) C Ant(E[p\). In either case we will say that p E p is 
surjective if the image of Gk is Aut n{E[p\). Often in the literature one sees this 
defined as being "as surjective as possible" in the complex multiplication case. In 
Section [6] we will give several examples of this. 

Note that there is always an isogeny defined over Q from E to an elliptic 
curve E' with complex multiplication by a maximal order. E has complex mul- 
tiplication by a non-maximal order if and only if its j-invariant is in the set 
{-12288000,54000,287496,16581375} [3*3 p. 483]. 

We have the following theorem of Rubin: 

Theorem 3.1. Suppose E is an elliptic curve defined over K with complex multi- 
plication by Ok- With w = ffO K and r 6 C x a generator of A, i.e., tOk — A, we 
have 
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(1) If L(E/K,1) 7^ then E{K) is finite, JU(K,E) is finite and there is a 
u G Ok[w _1 ] x such that 

(2) If L(E/K,l) = 0, then either E(K) is infinite, or the p-part ofm{K,E) 
is infinite for all primes p \ jfO K . 

(3) If E is defined overQ and r an (E /Q) = 1, then HSD(E/Q,p) is true for all 
odd p which split in K . 

Proof. See [36]. □ 

Corollary 3.2. // E is defined over Q, has complex multiplication by K and 
r an (E/Q) = 0, then BSD(E/Q,p) is true for all p > 5. If K ^ Q(v^3) then 
BSD(.E/<Q),3) is true if and only if 3\U c p {E). 



Proof. Let K = Q(\/ d) for d < a squarefree integer and without loss suppose E 
has complex multiplication by Ok- Letting E d be the model defined in Section [2] 
so that Ad = OA, note that since is an endomorphism of E we have Q~ 1 A C A 
which implies that A C A^. Thus E is isogenous to E d , and this degree \d\ isogeny 
is defined over Q since its kernel is {zA : z £ 9A} and Gq acts by multiplying 9 by 
±1. Thus we have that 

L{E/K, s) = L(E/Q, s) 2 . 

Since L(E/Q, 1) ^ we have L(E/K, 1) ^ so E{K) and UI(K, E) are finite. 
By Lemmas 12.21 and l2~3l we have that E(Q>) and IH((Q),i?) are finite and 

L[E,QA) - mm ■ #^(Q)) 2 ■ ' 

where aicZ. In this situation we have [6| Cor. 1.3]: 

#m(Q,E d ) _ #m(Q,E) n(E) ^ Cp (E) 



n 



#E d (Q) 2 #£(Q) 2 n(E d ) 11 c p (E d ) ' 

By Lemma I2T41 we have: 

L(E /Q,l) 2 = #III(Q,£) 2 tW 1 / 2 2 1 " n c p (£) 

fi(#) 2 #E{Q) 4 ' \\uj\\ 2 ' [E{R) : E°{R)} u ^ c p {E d ) ' 

Note that ||w|| 2 /2 is the area of A = tOk, i.e., tt times the area of Ok- If 
d £ {-1, -2} then this is \d\ 1/2 and otherwise it is |d| 1/2 /4. Therefore: 

i-TA 1 / 2 

2^/2^1-1/2. 

ImI 

If d # 1 (mod 4) then u = -1 and <J/|d| G {4, 1, 1/4, 1/16}. If d = 1 (mod 4) then 
v = 1 and 5 G {|d|, l/|d|}- We will show that in this case 5 = |d|. 

As noted in [351 P- 176], since E has complex multiplication it must be of additive 
reduction at all the bad primes. By [35J Cor. 15.2.1, p. 359] the product JJ p c p (E) 
is at most 4, and similarly for Yl p c p (E d ). Since c p (E)/c p (E d ) e {\d\, 1, l/\d\} for 
each prime p, if d < —3 then J\ c p (E)/c p (E d ) = 1 and if d > — 3 then this product 
is a power of two. Now suppose d < —3 (hence \d\ is a prime) and note that since 
L(E/Q, 1)/Q(E) is a rational number, we must have that ord| d | (((5/ldQ 1 / 2 ) is even 
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and this forces 6 = \d\ (this also implies that the other factors combine to make a 
perfect square, and that the "error term" u is a rational number). 
In summary, we have that 

2 V+W 5 1/2 \ ( 1 tt Qp{E) \ 
[E(R):E°(R)].\d\V*J \u \L c p (E d ) ) ' 

where the second factor is in 2 2Z and the third factor is in 2 2Z if d =t — 3 and in 
2 2Z 3 2Z if d = _ 3 Since R eg (£i(Q)) = \ t h e claim follows. □ 

Proposition 3.3. If E/Q has rank 0, has complex multiplication by K ^ Q(\/— 3) 
and has conductor N < 130000, then BSD(_B/Q, 3) is true. 

Proof. In this situation it is easy to check that 3 j Y[ p c p using computation. □ 

Lemma 3.4. With E and K as above, let p be a prime of K of good reduction for 
E which does not divide #O k . Then K(E[p\)/K is a cyclic extension of degree 
Norm(p) — 1 in which p is totally ramified. 

Proof. See [33 Lemma 21 (i)]. □ 

Lemma 3.5. With E and K as above, we have (Ok/pOk) x — Auto^ (E[p\) for 
all primes p. 

Proof. Let Ok — 1>[ct\. Then via the isomorphism E[p] = F 2 , the element a acts on 
F 2 by a matrix M £ GL2(F p ) and Auto K (E[p]) is isomorphic to the centralizer of 
M in GL2(F p ). The centralizer of M is equal to F p [M] since M cannot be a scalar 
element. In other words, we can make the identification Auto K (E[p\) = F p [a] by 
viewing a as an element of Aut(E[p\) . We define an isomorphism Auto K (E[p\) — > 
(O k / P O k ) x by sending a n to a n +pO K € {0 K /pO K ) x . If a" € pO K then M n = 
in GL 2 (F p ), hence the map is injective. It is surjective since Ok = Z[a]. □ 

Proposition 3.6. If p is a prime of good reduction for E not dividing f^O K which 
is inert in K , then ~p E is surjective. 

Proof. When p is inert in K, Norm(p) = p 2 . By Lemma \Jl\#G(il(K(E[v\)/K) 
!>"' — 1. Since Pe, p '■ Gal (if (E[p\) / K) — > Anto K {E[p\) is injective it suffices to 
show that #Auto K (E[p\) = p 2 — 1. By Lemma 13.51 this reduces to showing 
#{0 K /pO K ) x =p 2 -I which is true since [0 K /pO K ■ Z/pZ] = 2. □ 

The following result will be useful: 

Theorem 3.7. Let E be an elliptic curve defined overQ with complex multiplication 
by an order of K = Q(v— d) and p an odd prime not dividing d. Let F be a Galois 
number field not containing K. Then E(F)[p] is trivial. 

Proof. This is [13 Theorem 2]. □ 

4. Heegner Points 

If E is an elliptic curve over Q of conductor N, we say that the quadratic 
imaginary field K = Q(\/D) satisfies the Heegner hypothesis for E if each prime 
p | N splits in K. If K satisfies the Heegner hypothesis for E, then the Heegner 
point yK € E(K) is defined as follows (see [23] for details). By hypothesis there is 
an ideal N of Ok such that Ok/N is cyclic of order N. Since Ok C N^ 1 , we have 



L{E/%1) { #W — ) A 
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a cyclic iV-isogeny C/Ok — > C/TV -1 of elliptic curves with complex multiplication 
by Ok and hence a point x\ € Xq(N). By the theory of complex multiplication x\ 
is defined over the Hilbert class field H of K. We fix a modular parametrization 
ip : Xq(N) —> E of minimal degree taking oo to O, which exists by [45] and [4]. 
As above denote the minimal invariant differential on E by ui. Then ip*(oS) is the 
differential associated to a newform on Xq(N). We have i/j*(u>) — a ■ f where / is 
a normalized cusp form and a is some nonzero integer [16] constant. The Manin 
constant is c := \a\ and the Heegner point is yx '■= ^h/k{}P{xi)) £ E(K). It 
has been conjectured that c = 1 if E is optimal, and this has been verified for 
N < 130000 by Cremona in pQ. Define Ik '■= \E{K) / tor s : %Vk], which we call the 
Heegner index. Note that sometimes we may denote the Heegner index by Id to 
emphasize the dependence K = Q(y/~D). 

Gross, Zagier and Zhang have proven a deep theorem which expresses the first 
derivative of the L-series of E/K at 1 in terms of the canonical height h of the 
Heegner point yK- 

Theorem 4.1 (Gross-Zagier-Zhang). If K satisfies the Heegner hypothesis for E, 
then 

L>(E/K,1)= 2|M ' 2 ^ ) , 
c^ul-^\K(K)\ 

where ||w|| 2 = J e ^uj A iui and the quadratic imaginary number field K has 2uk 
roots of unity and discriminant A(K). 

Proof. Gross and Zagier first proved this in |22) when D is odd and Zhang gener- 
alized it in 03- 1=1 

Note that Uq^^j-j — 2, u q( v /^3) — 3 and for all other quadratic imaginary fields 
K we have uk = 1. Often one requires that D ^ { — 1,-3}, but since there are 
infinitely many D satisfying the Heegner hypothesis for E if r an (E) < 1, this is a 
minor issue (see the proof of Theorem 14.4)) . Note also that the h appearing in the 
formula as stated here is the absolute height, whereas the one appearing in |221 
Theorem 2.1, p. 311] is equal to our 2h. 

We have the following theorem of Kolyvagin: 

Theorem 4.2. If yK is nontorsion, then E(K) has rank 1 (hence Ik < oo), 
111(1^, E) is finite and 

c 3 I K m(K,E) = and #W(K, E)\c A I K , 

where C3 and c^ are positive integers (explicitly defined in [28) j. The primes dividing 
C4 are at most 2 and the odd primes p for which ~p E p is surjective. 

Proof. This is gSJ Theorem A]. □ 

Corollary 4.3. If yK is nontorsion, thenUl(Q,E) and HI(Q, E D ) are finite and 
have orders whose odd parts divide caI k - 

Proof. By Lemma O we have that #HI(Q,J5) • #IH(Q,£; £, ) divides #U1{K,E) 
up to a power of two. □ 

Theorem 4.4. If r an (E) < 1, then yK is nontorsion. In particular, 

r(E)=r an (E), 
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LU(Q,_E) is finite, and if p is an odd prime unramified in the CM field such that 
~Pe,p * s surjective, then 

ord p (#LU(Q,£)) < 2-ordp(J*). 

Proof. We follow the proof given in [14]. If e = — 1 (i.e., r an (E) — 1), then a 
result of Waldspurger (see [43) ) implies that there are infinitely many D < such 
that K = Q(v^D) satisfies the Heegner hypothesis for E and r an (E D ) = 0. If 
e = 1 (i.e., r an (E) — 0), then results of Bump, Friedberg and Hoffstein (see [5]) or 
independently results of Murty and Murty (see [34]) imply that there are infinitely 
many D < such that K — Q(a/D) satisfies the Heegner hypothesis for E. In this 
case, for parity reasons, L(E D /Q, 1) is always 0. 
We have that 

ord s=1 L{E/K, s) = ord s=1 L{E/Q, s) + ord s=1 L(E D /Q, s), 

which implies that in either case r an (E/K) = 1 which, by the Gross-Zagier-Zhang 
formula (Theorem 14. ip . implies that yx is nontorsion. Then Kolyvagin's theorem 
implies that E(K) has rank 1, Ik < oo and that III (if, E) is finite. 
By Lemma [2721 we have 

mnk{E(K)) = rank(£(Q)) + rank(£ D (Q)). 

The point yx belongs to E(Q) (up to torsion) if and only if e = — 1. If e = — 1, 
then rank(£J(Q)) = 1 since y K £ E(Q)/ tors . If e = 1, then some multiple of yx is 
in E(K)~ , which implies that rank( J B D (Q)) = 1, hence rank(£J(Q)) =0. □ 

Theorem 4.5. Suppose E has CM by the full ring of integers Ok- 

(1) Ifr an (E) = 0, then BSV{E/Q,p) is true for p> 5. 

(2) Ifr &a {E) = I, then: 

(a) If p > 3 is split, then BSD(_E/(Q),p) is true. 

(b) // p > 5 is inert and p is a prime of good reduction for E, then 

ord p (#IH(Q, E)) < 2 • ord p (7), 

where I = Iq/^/jj) is any Heegner index for D < —4 satisfying the 
Heegner hypothesis. 

Proof. Part (1) is Corollary[3j2 Part (2a) is part (3) of TheorcmEU Part (2b) is 
obtained from Proposition 13.61 by Theorem 14.41 □ 

We now describe an algorithm for computing the Mordell-Weil and Shafarevich- 
Tate groups when the analytic rank of E/Q) is bounded above by one. In the next 
section we will make this more explicit, with the aim of developing a practical 
procedure for verifying the Birch and Swinnerton-Dyer conjecture for a specific 
elliptic curve. 

Lemma 4.6. If B > is such that S = {P e E(Q) : h(P) < B} contains a set of 
generators for E{Q)/2E(Q) then S generates E(Q). 

Proof. See [TO] §3.5]. □ 

Theorem 4.7. If r an (E) < 1, then there are algorithms to compute both the 
Mordell-Weil group E(Q) and the Shafarevich-Tate group LU(Q,_E). 
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Proof. In general 2-descent is not known to terminate, but in this case r = r an (E) 
is known. Therefore 2-descent will determine E(Q)/2E(Q). Then we can search 
for points up to the maximum height of points in E(Q)/2E(Q) and by Lemma EOH 
we will find a set of generators for E(Q). 

To compute HI(Q, E), note that Kolyvagin's theorem gives an explicit upper 
bound B for #HI(Q, E). For primes p dividing this upper bound, we can (in theory 
at least) perform successive p fe -descents for k = 1, 2, 3, ... to compute HI(Q, E)[p k ]. 
As soon as UI(Q,E)[p k ] = HI(Q, E)[p k+1 ] we have UI(Q,E)[p k ] = IH(Q, E)\p°°] 
and can move on to the next prime. Once we do this for each prime we have 

iH(Q,£) = e p|B ni(Q,£;)[p°°]. □ 

For r an (E) < 1, we can (at least in theory) compute #HI(Q, E) aD exactly, as 
first described in [22l p. 312]. Together with the previous theorem, this shows that 
the BSD formula for E can be proven for specific elliptic curves via computation. 

The main ingredient to applying Kolyvagin's work to a specific elliptic curve E of 
analytic rank at most 1 is to compute the Heegner index Ik = [E(K)/ tors : Zyjc], 
where K — Q(yD) satisfies the Heegner hypothesis for E and yx £ E(K) is 
a Heegner point (and y~K is its image in E(K) u OTS ). Let z £ E(K) generate 
E(K) 

/tors* 

We can efficiently compute h{yK) to desired precision using the Gross-Zagier- 
Zhang formula (Theorem 14. ![) ). reducing the index calculation to the computation 
of the height of z, since 



T 2 - 

We have the following corollary of Lemma 12.21 

Corollary 4.8. Suppose E is an elliptic curve of analytic rank or 1 over Q, in 
particular rank(_E(Q)) = r an (E(Q)). Let D < be a squarefree integer such that 
K = Q(V r D) satisfies the Heegner hypothesis for E. 

(1) If we have r an (F(Q)) = 1, where F is one of E or E D , and if x G 
generates F(Q) f toIS , then 



_ him) 

1 Hz) ' 



Ik = 



(2) Suppose r an (E(Q)) = 0. If E(Q)[2] = then let A = 1, otherwise let A = 4. 
Let C — C(E D /Q) denote the Cremona- Pricket- Siksek height bound [llj . 
If there are no nontorsion points P on E D ((J) with naive absolute height 

then 

I K < M. 

Note that this is a correction to the results stated in [3T]. However, for each 
case in which [21] uses this result, the corresponding A is equal to 1. Therefore this 
mistake does not impact any of the other results there. 

If rank(£ , (Q)) = 1, then we will have a generator x from the rank verification, 
and we can simply check whether \x is in E(K) and use part 1 of the corollary. If 
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rank(£'(Q)) = then we may not so easily find a generator of the twist, because 
a point search may very well fail since the conductor of E D is D 2 N . However, a 
failed point search can still be useful as long as we search sufficiently hard, because 
of part 2 of the corollary. 

5. Bounding the order of HI(Q, E) 

Suppose r an (E) < 1 for E/Q and that K is a quadratic imaginary field satis- 
fying the Heegner hypothesis for E. We have already seen that for analytic rank 
zero curves 3SD(E,p) is true for primes p > 3 if E has complex multiplication. 
Otherwise we have the following theorem: 

Theorem 5.1. Suppose E is an optimal non-CM curve, and let p be a prime such 
that p\ 6N and pe, p is surjective. If r an (E) = then HI(Q, E) is finite and 

ord p (#HI(Q,£)) < ord p (^^p 

Proof. As outlined in [3TJ §4], this is due to Kato's Euler system [37] together with 
a result of Matsuno . □ 

As a corollary to this theorem BSD(£',p) is true for primes p > 3 of good 
reduction where E[p] is surjective and p does not divide #HI(Q, E) an . Under 
certain technnical conditions on p (explained in |20j ) . Grigorov has proven the 
bound on the other side: 

ord p (#ni(Q )J B))=ord p (^^ 

Because Theorem 15 . f I often eliminates most of the primes p > 3, one often does 
not need to compute the Heegner index for rank zero curves. However, if there 
is a bad prime p > 3 such that Pe, p i s surjective then Theorem 15. I 1 does not 
apply and descents are in general not feasible. For example, this happens with the 
pair (E,p) = (2900dl,5). Interestingly #LH(<Q>,£!) = 25 in this case (this will be 
proven in Section[7J. Theorem H3] still gives an upper bound in this case, provided 
we have some kind of bound on the Heegner index. In the example above the 
methods of Section [4] show that Ik < 23, implying that ords(/x) < 1 and hence 
ord 5 (#HJ(Q,£;)) <2. 

The following theorems give alternate hypotheses under which Kolyvagin's ma- 
chinery still gives the same result. These should be viewed as extensions of Theorem 
PI 

Theorem 5.2. If r an (E /Q) < I and p is a prime such that p\2- A(K), p 2 \ N 
and ~p E is irreducible then 

ord p (#IH(Q,£)) <2-oxd p (I K ). 

Proof. See [7J[H]. □ 

Theorem 5.3. Suppose r an (_E/(Q) < 1 and E is non-CM and suppose p is an odd 
prime which does not divide #-E'(Q)tors for any E' which is Q-isogenous to E. If 
A(K) is divisible by exactly one prime, further suppose thatp\ A(K). Then 

ord p (#IH(Q,£)) <2-ord p (7 K ). 
Proof. See (2U Thm. 3.5]. □ 
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Jctchev [25] has improved the upper bound with the following: 

Theorem 5.4 (Jetchev). If the hypotheses of any of Theorems \4-4\ EH1 or \5.3l avvlv 
to p, then 

ord p (#IH(Q,£!)) < 2 • f ord p (I K ) - maxord p (c g ) J . 

If p divides at most one Tamagawa number then this upper bound is equal to 
ord p (#HI(Q, £)„„). 

There is also an algorithm of Stein and Wuthrich based on the work of Kato, 
Perrin-Riou and Schneider (a preprint is available at |40j and the algorithm is 
implemented in Sage [42]). Suppose that the elliptic curve E and the prime p ^ 
2 are such that E does not have additive reduction at p and the image of ~Pe,p 
is either equal to the full group GL 2 (F p ) or is contained in a Borel subgroup of 
GL 2 (F p ). (In GL 2 (F p ) these are subgroups which are conjugate to the group of 
upper triangular matrices. See [24] Section 21] for more details.) These conditions 
hold for all but finitely many p if E does not have complex multiplication. Given a 
pair (E,p) satisfying this hypothesis, the algorithm either gives an upper bound for 
#III(Q, E)[p°°] or terminates with an error. In the case that r an (E) < 1, an error 
only happens when the p-adic height pairing can not be shown to be nondegenerate. 
For curves of conductor up to 5000 and of rank or 1 this never happens for those 
p considered. Note that it is a standard conjecture that the p-adic height pairing 
is nondegenerate, and if this is true for a particular case, it can be shown via a 
computation. 

There are also techniques for bounding the order of LU(Q, E) from below. In [13] . 
Cremona and Mazur establish a method for visualizing pieces of HI(Q, E) as pieces 
of Mordell-Weil groups via modular congruences, which is fully explained in the 
appendix of [2^ . They have also carried out computations for curves of conductor 
up to 5500, which are listed in [Uj. In addition, Stein established a method for 
doing this for abelian varieties as part of his Ph.D. thesis |41j . 

6. Examples 

The following examples are not only useful in illustrating the preceding discus- 
sion, but will also be needed to prove the main results of this note. We begin by 
proving that several mod-p Galois representations are surjective, where the elliptic 
curve has complex multiplication. This will allow us to use Theorem 14.41 for these 
curve-prime pairs in Section [7] 

Example 6.1. Let p = 5. 



675al : 


■ y 2 


+ y = 


x 3 + 31 


900cl : 


■ y 2 


= x 3 - 


f 100 


2700hl : 


■y 2 


= x 3 - 


f 625 


270011 : 


■y 2 




f 5 


2700pl : 


■y 2 




f 500 


3600bdl : 


■ y 2 


= x 3 - 


- 100 



(1) Let E be the curve 675a, which has complex multiplication by the full ring 
of integers of K = Q(\/^3) (which is generated over Z by a = (v 7 — 3+l)/2). 
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After a choice of basis for E\p], we find that a acts on E[p] = (Z/pZ) 2 via 
the matrix 



Let f{x) be the p-division polynomial of E, and let g{y) be the resultant 
with respect to x of f(x) and the defining polynomial of E, noting that 
the roots of / are the cc-coordinates of the points of E[p] and those of g 
are the y-coordinates. Over Q, f(x) is irreducible of degree 12 and g(y) — 
gi(y) 3 , where gi{y) is irreducible of degree 8. If K x — Q[x]/(f(x)) and 
K y = Q[y]/ (gi(y)), then / factors into four linear factors and four quadratic 
ones over the compositum K x ■ K y and g\ into four linear factors and two 
quadratic ones. One can verify that K <f_ K x ■ K y and so K x ■ K y ■ K, which 
has degree 48, is a subfield of Q(E[p\) by Theorem l3.7l On the one side since 
Gal(K(E[p])/K) is a subgroup of Aut R (E[p}) we have [K{E[p]) : K] | 24, 
while on the other side since K x ■ K y ■ K C Q(E[p\) C K(E[p\) we have 
24 | [K(E[p]) : K\. Therefore #G&\(K (E\p\) / K) = 24 and hence p BjP is 
surjective. 

If E is one of the curves 900c, 2700h, 27001 or 2700p, then we have the 
same K, the same factoring patterns, the same conjugacy class in GL2(F P ) 
and in each of these cases K <£_ K x ■ K y . Therefore for each of these, ~p E p 
is surjective. 

(2) Let E be the curve 3600bd, which also has the same K . The matrix is now 



which still has centralizer of order 24. Computing the compositum K x ■ K y 
is difficult in this case, so we argue differently. The intersection of K x and 
K y is degree 4, and one can verify that K is not contained in K y , which is of 
degree 8. Therefore we can still conclude that K is not contained in K x -K y . 




The centralizer of M in GL2(Z/pZ) is of order p 2 — 1, whence 
#Aut R (£[p]) = 24. 




Now we may proceed as above, and conclude that p E is surjective. 
Example 6.2. Let p = 7. 



1568gl : y 2 = x 3 - 49x 
3136tl : y 2 = x 3 + 49x 
3136ul : y 2 = x 3 - 343x 
3136vl : y 2 = x 3 - 7x 



If E is one of the curves 1568g, 3136u or 3136v, then the matrix is 




whereas if E is the curve 3136t, then the matrix is 
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In all cases the centralizer is order 48, and K — Q(i). With f(x), g(y) and K x 
as in the previous example, g(y) is irreducible of degree 48 in each case (so let 
K y = Q[y]/(g(y))), and it is possible to verify that K <f_ K y . Again, by Theorem 
13. 7i we have that K ■ K y C Q(E[p\) C K(E[p\), and that the compositum is degree 
96. Therefore #Gal(K(E[p])/K) = 48 and p EtP is surjective. 

Example 6.3. Let p = 11. 



3267dl : y 2 + y = x 3 - 333 
3872al : y 2 = x 3 + 1331x 
4356al : y 2 = x 3 - 44 
4356bl : y 2 = x 3 + 58564 
4356cl : y 2 = x 3 - 1331 



(1) If E is one of the curves 3267d, 4356a, 4356b or 4356c, then K = Q(V=3) 
and the matrices are, respectively, Mi, Mi, and Mi, where 



In all cases the centralizer is of order 120. With f(x), g(y) and K x as 
above, then over Q, f(x) is irreducible of degree 60 and g(y) = gi(y) 3 , 
where gi{y) is irredcubile of degree 40 (so let K y — Q[y]/(gi(y))). We can 
verify that / and g\ remain irreducible over K, and so [K x ■ K : Q] = 120 
and [K y ■ K : Q] = 80. Since the least common multiple is 240, we have 
[K x ■ K y ■ K : Q] = 240. Therefore #Gal(# {E\p])/K ) = 120 and p EjP is 
surjective. 

(2) If E is 3872a, then K = and the matrix is 



The centralizer is again of order 120. With f(x), g(y) and K x as above, 
then over Q, f{x) is irreducible of degree 60 and g(y) is irreducible of degree 
120 (so let K y = Q[y]/ (g(y))). Since g(y) remains irreducible over K we 
have [K y ■ K : Q] = 240. Therefore #Gal(K (E[p\) / K) = 120 and p E>p is 
surjective. 

Schaefer and Stoll have described a way of computing the p-Selmer group in [57] . 
If S is {p} union the set of primes £ or such that p divides q, then Sel^(Q,i?) 
corresponds to the subgroup of elements of H 1 (Q, E; S) whose localizations are in 
the image of the local connecting homomorphisms for each place in S. In practice, 
one computes the S'-Selmer group K(S,p) of the etale algebra K corresponding to a 
Galois-invariant subset of E[p] \ {O} in terms of the class group and i'-units. Here 
we give two useful examples of this techinque, which proves that the 5-primary part 
of ni(Q, E) is trivial. 




and 





Example 6.4. Let p = 5. Usually five-descents are infeasible due to the number 
fields involved, e.g. if the mod-5 representation is surjective, the etale algebra will 
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be a single number field of degree 24, for which class group and S-unit calculations 
will be too difficult to complete without assuming GRH. However, the following 
two examples illustrate cases in which a five descent is actually possible without 
assuming GRH. Here the 5-division polynomial has a factor of degree 4 which 
corresponds to a Galois invariant spanning subset X of E[p] \ {O} of size 8. In each 
case g{y) is the resultant of this factor and the defining polynomial of E, which 
defines a number field A\. 

(1) Let E = 225al. Then we have 

g(y) = y 8 + Ay 7 + 97y 6 + 277y 5 - 80y 4 
- 617y 3 - 548y 2 - 194y + 331. 

(2) Let E = 3600be. Then we have 

g( y ) = y 8 - 720000?/ 6 - 27000000000y 4 
+ 1458000000000000000. 

In both cases the set S is of order one, consisting of the prime above 5, and the 
dimension of Ai(S,p) is 6. Computations show that the dimension of Ai(S, p)^ = 
ker(er g — g) (notation again comes from |37j ) is at most 2 in both cases. Since the 
Selmer group Sel (5) (Q,£) is contained in Ai(S, p)^ it is dimension at most 2, and 
since the dimension of E(Q)/5E(Q) is exactly 1, we have that in these two cases 
#III(Q,£7)[5] < 5, and hence that #IH(Q, £T)[5] = 1. 

7. Curves of conductor N < 5000, irreducible mod-p representations 

There are 17314 isogeny classes of elliptic curves of conductor up to 5000. There 
are 7914 of rank 0, 8811 of rank 1, 589 of rank 2, and none of higher rank. There 
are only 116 optimal curves which have complex multiplication in this conductor 
range. Every rank 2 curve in this range has #HI(Q, E) an — 1. For any curve E 
in this range, ord p (HI(Q, E) an ) < 6 for all primes p. If such an E is optimal then 
ord p (IH(Q, E) an ) < 4 for all primes p. 

Theorem 7.1. IfE/Q has conductor N < 5000, then BSD(£:, 2) is true. 

Proof. Assume that E is an optimal curve and let T(E) — ord 2 (#HI(Q, E) an ). For 
each curve we are considering, if T(E) = then a 2-descent proves BSD(£J,2) and 
if T(E) > then a 2-descent proves LH(Q, £) [2] = (Z/2Z) 2 . If T(E) = 2 then a 
4-descent proves BSD(S, 2) and if T(E) > 2 then a 4-descent proves IH(Q, E)[A] = 
(Z/4Z) 2 . For the range of curves we are considering T(E) is at most 4 and if 
T(E) = 4, an 8-descent proves that UI(Q,E)[8] = UI(Q,E)[4] and hence proves 
BSD(£,2). □ 

Theorem 7.2. IfE/Q has conductor N < 5000, then BSD(£,3) is true. 

Proof. For optimal curves where ord3(#IH(Q, E) an ) is trivial, a 3-descent suffices. 
For the rest we have that ord3(#IH(Q, E) an ) — 2, and in this case a 3-descent 
proves that IH(Q,i?)[3] = (Z/3Z) 2 . These 31 remaining optimal curves are shown 
in Table [TJ If E is in the set {681bl, 1913bl, 2006el, 2429bl, 2534el, 2534fl, 
2541dl, 2674bl, 2710cl, 2768cl, 2849al, 2955bl, 3054al, 3306bl, 3536hl, 3712jl, 
3954cl, 4229al, 4592fl, 4606bl}, then the algorithm of Stein and Wuthrich [lo] 
proves the desired upper bound. For the rest of the curves except for 2366dl and 
4914nl, the mod-3 representations are surjective. Table [2] displays selected Heegner 
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Table 1. Optimal E with ord 3 (#LU(Q, E) an ) = 2 



681bl 


2429bl 


2601hl 


2768cl 


3054al 


3712jl 


4229al 


4675jl 


1913M 


2534el 


2674bl 


2849al 


3306bl 


3879el 


4343M 


4914nl 


2006el 


2534fl 


2710cl 


2932al 


3536hl 


3933al 


4592fl 


4963cl 


2366dl 


2541dl 


2718dl 


2955bl 


3555el 


3954cl 


4606bl 





Table 2. Heegner indices where ord 3 (#LH(<Q), E) an ) = 2 



E 


D 


Id 


ord 3 (/ £) ) 




E 


D 


Id 


ord 3 (Id) 


2601hl 


-8 


12 


1 




3933al 


-56 


24 


1 


2718dl 


-119 


48 


1 




4343bl 


-19 


12 


1 


2932al 


-31 


3 


1 




4675jl 


-19 


18 


2 


3555el 


-56 


6 


1 




4963cl 


-19 


3 


1 


3879el 


-35 


24 


1 













indexes in this case, which together with Theorem 14.41 fand Theorem l5.4l for 4675jl 
since ci7(4675jl) = 3) proves the desired upper bound. 

Finally we are left with 2366dl and 4914nl. Each isogeny class contains a curve 
F for which #HI((Q), F) &n = 1, so we replace these curves with 2366d2 and 4914n2. 
Then 3-descent shows that HI(<Q>, F)[3] = 0, and hence BSD(F,3) for both curves. 

□ 

Corollary 7.3. //rank(_E(Q)) = 0, E has conductor N < 5000 and E has complex 
multiplication, then the full BSD conjecture is true. 

Proof. This is a direct result of Corollary 13.21 and Theorems 17.11 and 17.21 □ 

Theorem 7.4. If E/Q is an optimal curve with conductor N < 5000 and nontrivial 
analytic 111, i.e. #III(Q,E) an ^ 1, then for every p | #HI((Q>, E) an , BSD(E,p) is 
true. 

Proof. By |12j we have that p < 7, and by the theorems of the previous section, we 
may assume that p > 5. 

For p = 5, E is one of the twelve curves listed in Table |3] These are all rank 
curves with E[b] surjective, so if 5 \ N Theorem 15.11 provides an upper bound of 2 
for ord 5 (#HI(Q,£)). This leaves just 2900dl and 3185cl. For 2900dl, Corollary 
14.81 together with a point search shows that the Heegner index is at most 23 for 
discriminant -71, hence Kolyvagin's inequality provides the upper bound of 2 in 
this case. For 3185cl, the algorithm of Stein and Wuthrich [40] provides the upper 
bound of 2. In all twelve cases [T3] (and the appendix of [2]) finds visible nontrivial 
parts of IH(Q, -E)[5]. Since the order must be a square, #LH(Q, E) must be exactly 
25 in each case. 

For p = 7 there is only one curve E = 3364cl and E[7] is surjective. Since 
7 \ 3364 and E is a rank curve without complex multiplication, Theorem 15.11 
bounds ord7(#LU((Q), E)) from above by 2. Furthermore, Grigorov's thesis |20[ p. 
88] shows that ord7(#LU(Q, E)) is bounded from below by 2. Alternatively, the 
elements of LU(Q,_E)[7] are visible at three times the level, as Tom Fisher kindly 
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Table 3. Optimal E with ord 5 (#HI(Q, E) an ) = 2 



1058dl 


1664kl 


2574dl 


2900dl 


3384al 


4092al 


1246bl 


2366fl 


2834dl 


3185cl 


3952cl 


4592dl 



Table 4. Non-additive reduction, irreducible but not surjective 



E 


V 


D 


Id 


E 


P 


D 


Id 


E 


P 


D 


Id 


324bl 


5 


-23 


6 


1296gl 


5 


-23 


2 


3468cl 


5 


-47 


2 


324dl 


5 


-23 


2 


1296il 


5 


-23 


2 


3468hl 


5 


-47 


< 11 


608bl 


5 


-31 


2 


1444al 


5 


-31 


2 


4176nl 


5 


-23 


< 3 


648cl 


5 


-23 


4 


2268al 


5 


-47 


6 


4232bl 


5 


-7 


2 


1044al 


5 


-23 


12 


2268M 


5 


-47 


< 3 


4232dl 


5 


-7 


6 


1216il 


5 


-31 


1 


3132al 


5 


-23 


6 











pointed out - one should also be aware of his tables of nontrivial elements of HI of 
order three and five, available on his websiteQ. □ 

Theorem 7.5. If E/Q is an optimal rank curve with conductor N < 5000 and 
p is a prime such that E[p] is irreducible, then BSD(E,p) is true. 

Proof. By theorems of the previous two sections, we may assume that p > 3, E does 
not have complex multiplication and ord p (#LU(Q, E) an ) = 0. In this case Theorem 
I5.1l applies to E (since the rank part of the conjecture is known for N < 130000 by 
[12]). At first, suppose that E does not have additive reduction at p. 

Suppose that E[p] is surjective. In this case we need only consider primes dividing 
the conductor N. For such pairs (E,p), we can compute the Heegner index or an 
upper bound for it, which gives an upper bound on ord p (IH((Q ) , Ej). When the 
results of Kolyvagin and Jetchev were not strong enough to prove BSD(E,p) using 
the first available Heegner discriminant, the algorithm of Stein and Wuthrich [40] 
was (although to be fair the former may be strong enough using other Heegner 
discriminants in these cases). This algorithm always provides a bound in this 
situation since p > 3 is a surjective prime of non-additive reduction and E is rank 
0. 

Now suppose that E[p] is not surjective. The curve-prime pairs matching these 
hypotheses can be found in Table 0] along with selected Heegner indices. The only 
prime to occur in these pairs is 5, and each chosen Heegner discriminant and index 
is not divisible by 5 except for E = 3468h. Further, 5 does not divide the conductor 
of any of these curves so by Cha's theorem 15.21 BSD(£?, 5) is true for these pairs. 
For E = 3468h note that one of the Tamagawa numbers is 5, so by Theorem 15. 4[ 
BSD(i?, 5) is true for this curve. 

We are now left to consider the 1964 pairs (E,p) for which E has additive 
reduction at p. There are 14 pairs where E[p] is not surjective, and Theorem 15.31 
applies to all of them. The Heegner point height calculations listed in Table [5] 
prove that BSD(E,p) is true in these cases. Note that when p may divide the 
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Table 5. Additive reduction, irreducible but not surjective 
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E 


P 


D 


Id 


Tp 


E 


P 


D 


Id 


T p 


675dl 


5 


-11 


2 


1 


2400bgl 


5 


-71 


20 


10 


675fl 


5 


-11 


2 


1 


2450dl 


7 


-31 


1 


1 


800el 


5 


-31 


G 


3 


2450bdl 


7 


-31 


< 13 


7 


800fl 


5 


-31 


2 


1 


4800nl 


5 


-71 


< 5 


3 


leooii 


5 


-31 


4 


2 


4800ul 


5 


-71 


10 


5 


1600kl 


5 


-31 


4 


2 


4900sl 


5 


-31 


4 


2 


2400fl 


5 


-191 


< 5 


2 


4900ul 


5 


-31 


12 


6 



T p = Oldp(U q C q ). 



Heegner index, it must do so of order at most 1, and in these cases it also divides 
a Tamagawa number, so Theorem 15 .41 assists Theorem 15.31 

Now we may also assume that E[p] is surjective. In these cases, Heegner index 
computations sufficed to prove BSD(E,p), using Theorem l4.4l and Theorem l5.4[ For 
79 of these curves the Heegner index computation required 4- and even 6-descent 
[15] , These are listed in Tabled thanks to Tom Fisher. □ 

For example if E = 1050cl, the first available Heegner discriminant is -311. 
Bounding the Heegner index is difficult in this case since it involves point searches 
of prohibitive height. However in two and a half seconds the algorithm of Stein and 
Wuthrich provides an upper bound of for the 7-primary part of the Shafarevich- 
Tate group, which eliminates the last prime for that curve. 

Proposition 7.6. If E is the elliptic curve 1155k and p — 7, then BSD(E,p) is 
true. 

Note that for (E,p) = (1155k, 7), we have c 3 {E) = 7,c 5 (E) = 7, 
ord 7 (#HI(Q,£) an ) = and ord 7 (#HI(Q, E)) < 2, 
by Theorem 15.41 The following proof is due to Christian Wuthrich. 

Proof. First, note that E/Q has non-split multiplicative reduction at 7. Let D = — 8 
and let K = Q(y/D), noting that E(K) = E(Q) S Z and that #E D (Q) = 1. 
Since 7 is inert in K, the reduction of E/K at 70k is split multiplicative. Kato's 
theorem |27[ Thm. 17.4] is known to hold for curves with multiplicative reduction 
over abelian fields unramified at p. The characteristic series f(T) of the dual of the 
Selmer group therefore divides the p-adic L-series 

L P {E/K,T) = L(E/Q,T) ■ L(E D /Q,T). 

By work of Jones |26i Thm. 3.1], we can compute the order of vanishing of f(T) 
at T — 0, which is 2 since the reduction is split multiplicative, and the leading term 
which is, up to a unit in Zp , 

I]„ c v ■ #^(F 49 ) ■ #IH(if, E)[7°°] ■ Reg p (E(K)) ■ C 
#E{Kf tms 

where C is the L-invariant and Reg p is the p-adic regulator as defined in the split 
multiplicative case by [31] and corrected by [44] . 
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Table 6. Additive reduction, surjective 



E 


P 


D 


Id 


Tp 


E 


P 


D 


Id 


Tp 


105011 


5 


-311 


3 





3850ml 


5 


-2351 


2 





1050nl 


5 


-2399 


19 





3850yl 


5 


-1399 


54 





1050ql 


5 


-311 


7 





3900kl 


5 


-1199 


4 





1350ol 


5 


-239 


4 





390011 


5 


-191 


30 


1 


1470ql 


7 


-479 


26 





4050bil 


5 


-71 


4 





1764hl 


7 


-167 


6 





4050sl 


5 


-551 


6 





1850dl 


5 


-471 


6 





4050x1 


5 


-119 


6 





2100ol 


5 


-311 


4 





4200bdl 


5 


-479 


27 





2352x1 


7 


-551 


6 





4200ml 


5 


-719 


32 





2450bdl 


5 


-559 


14 





4350ql 


5 


-719 


11 





2450kl 


5 


-159 


2 





4350wl 


5 


-719 


24 





2550bcl 


5 


-191 


7 





4410bl 


7 


-671 


4 





2550jl 


5 


-239 


23 





4410bil 


7 


-1319 


18 





2550zl 


5 


-1511 


45 


1 


4410bjl 


7 


-311 


6 





2646bal 


7 


-47 


11 





4410ql 


7 


-839 


4 





2646bdl 


7 


-143 


10 





4410ul 


7 


-2231 


10 





2650kl 


5 


-679 


28 





4550pl 


5 


-1119 


14 





3038ml 


7 


-55 


6 





4606bl 


7 


-31 


12 





3150bcl 


5 


-1511 


6 





4650bol 


5 


-119 


18 





3150bdl 


5 


-1991 


64 





4650bsl 


5 


-239 


84 





3150bjl 


5 


-311 


2 





4650btl 


5 


-1511 


2 





3150bnl 


5 


-1991 


22 





4650bul 


5 


-1199 


170 


1 


3150tl 


5 


-1151 


6 





4650ql 


5 


-119 


6 





3185cl 


7 


-199 


10 





4650wl 


5 


-719 


46 





3225bl 


5 


-119 


4 





4725ql 


5 


-59 


8 





3234cl 


7 


-503 


16 





4800bal 


5 


-71 


7 





3350dl 


5 


-79 


12 





4850hl 


5 


-31 


22 





3450pl 


5 


-479 


13 





4900wl 


5 


-311 


8 





3450vl 


rr 

5 


-191 


180 


1 


4950bjl 


r 

5 


O OA 

-239 


6 





3630cl 


11 


-1559 


4 





4950bkl 


5 


-239 


14 





363011 


11 


-239 


35 





4950bml 


5 


-479 


56 





3630rl 


11 


-239 


7 





4950bpl 


5 


-431 


22 





3630ul 


11 


-1319 


9 





4950wl 


5 


-1151 


4 





3650jl 


5 


-79 


14 





4950x1 


5 


-359 


12 





3822bcl 


7 


-647 


18 





4998bgl 


7 


-47 


18 





3822el 


7 


-1511 


2 





4998bkl 


7 


-47 


36 





3822ul 


7 


-503 


10 





4998kl 


7 


-47 


30 





3822wl 


7 


-503 


6 





4998tl 


7 


-1487 


6 





3822zl 


7 


-1823 


32 





4998ul 


7 


-47 


6 





3850el 


5 


-1399 


6 
















Tp=ord p (Yl q c q ). 



PROVING BSD FOR SPECIFIC CURVES OF RANK AND 1 



21 



We compute n„ c v = 7 3 , £(F 49 ) = Z/48Z and 

L P (E/Q, T) = (6 • 7 + C>(7 2 )) • T + (4 • 7 + 0(7 2 )) • T 2 + 0(T 3 ) 

L P (E D /Q, T) = (2 • 7 + 0(7 2 )) • T + (4 • 7 + 0(7 2 )) • T 2 + 0(T 3 ). 

To compute the L- invariant £ we switch to the Tate curve. Since E D /Q has 
split multiplicative reduction at 7 and the parameter is the same as for E/K, we 
have 

q E = 3 ■ 7 + 3 ■ 7 2 + 4 • 7 3 + 7 5 + (9(7 6 ). 
Hence the L-invariant is 

C = log p {q E )/oTd p {q E ) = 2 • 7 + 6 • 7 2 + 2 • 7 3 + 5 • 7 4 + 0(7 6 ). 

Finally we wish to compute the p-adic regulator. If P is a generator of E(K), 
then Q — 7 ■ 8 ■ P has good reduction everywhere and lies in the formal group at 
the place 70 k ■ One computes, as in [JUl §4-2], the p-adic height of Q and so that 
of P: 

h p (P) = = 2 • 7- 1 + 4 + 5 • 7 + 2 ■ 7 2 + 7 3 + 3 ■ t + 0(7 6 ). 

Since the leading term of the p-adic L-function is 5 • 7 2 + (9(7 3 ) and the leading 
term of f(T) must have smaller valuation, we have 

ord p (V 3 • 48 • #JH(K, E) [7°°] ■ ■ Cj < 2. 

Therefore, 

ordp(#ni(X,£;)[7 00 ]) < -OTd p (h p (P)) - ord p (£) = 0. 
In particular, ord 7 (#IH((Q, E)) =0. □ 

It may also be possible to prove this using [19] , since there is a modular congru- 
ence 77a[7] ^ 1155k[7]. 

Theorem 7.7. // E/Q is a rank 1 curve with conductor N < 5000 and p is a 
prime such that E[p] is irreducible, then BSD(£',p) is true. 

Proof. We may assume in addition that E is optimal, since reducibility is isogeny- 
invariant. By Theorems 17. II and 17.21 if p < 5 then BSD(_E,p) is true. Thus we may 
assume p > 5. Computing the Heegner index is much easier when E has rank 1, as 
noted in Section[4] Kolyvagin's theorem then rules out many pairs (E,p) right away. 
Then some combination of Theorems 15.31 15.21 15.41 and the algorithm of Stein and 
Wuthrich [40] will rule out many more pairs. If no combination of these techniques 
works for the first Heegner index one computes, then another Heegner discriminant 
must be used. Table [7] lists rank 1 curves E for which this is necessary, such that 
E[p] is irreducible, E does not have complex multiplication and (E,p) ^ (1155k, 7). 
All these curves have E[p] surjective and p does not divide any Tamagawa numbers 
so it is sufficient to demonstrate a Heegner index which p does not divide. The case 
(1155k, 7) is Proposition 17.61 

If E has complex multiplication, there are 17 pairs (E,p) left, namely the six 
pairs in Example 16. 11 the four in Example 16.21 the five in Example 16.31 and the two 
in Example 16.41 Table [8] lists Heegner indexes which, together with Theorem 14.41 
prove the fifteen cases not handled in Example 16.41 □ 
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Table 7. Some Heegner indexes using larger discriminants 



E 


P 


D 


Id 


E 


P 


D 


Id 


E 


P 


D 


Id 


1450cl 


5 


-151 


3 


3150il 


5 


-479 


8 


4440fl 


5 


-259 


2 


1485el 


5 


-131 


4 


3150bbl 


5 


-479 


4 


4485dl 


5 


-296 


2 


1495al 


5 


-79 


3 


3310bl 


5 


-151 


3 


4550jl 


5 


-199 


4 


1735al 


5 


-24 


4 


3450bl 


5 


-551 


28 


4675tl 


5 


-84 


9 


2090cl 


5 


-431 


8 


3480hl 


5 


-239 


2 


4680hl 


5 


-311 


8 


2145al 


5 


-131 


2 


3630hl 


5 


-431 


3 


4725cl 


5 


-104 


8 


2275bl 


5 


-139 


2 


3760kl 


5 


-39 


1 


4800bxl 


5 


-119 


7 


2550nl 


5 


-239 


9 


3900nl 


5 


-599 


2 


4815el 


5 


-71 


G 


2860al 


5 


-519 


9 


3920yl 


5 


-159 


6 


4950rl 


5 


-359 


G 


2970jl 


5 


-359 


3 


4050hl 


5 


-239 


32 










2990el 


5 


-159 


12 


4140cl 


5 


-359 


6 


2660al 


7 


-439 


11 


3060hl 


5 


-359 


18 


4200tl 


5 


-551 


4 


4158al 


7 


-215 


2 


3075al 


5 


-119 


14 


4400zl 


5 


-79 


24 


4704tl 


7 


-143 


8 


3140bl 


5 


-39 


2 


4410il 


5 


-479 


2 


4914x1 


7 


-335 


12 



Table 8. Heegner indexes of some rank 1 curves with complex multiplication 



E 


P 


D 


Id 


E 


P 


D 


Id 


675a 


5 


-11 


2 


3136v 


7 


-47 


2 


900c 


5 


-119 


G 


3267d 


11 


-8 


2 


1568g 


7 


-31 


2 


3600bd 


5 


-71 


12 


2700h 


5 


-119 


3 


3872a 


11 


-7 


2 


27001 


5 


-119 


3 


4356a 


11 


-95 


4 


2700p 


5 


-71 


G 


4356b 


11 


-167 


G 


3136t 


7 


-55 


2 


4356c 


11 


-95 


2 


3136u 


7 


-31 


4 











8. Curves of conductor N < 5000, reducible mod-j> representations 

Suppose -E 1 is an optimal elliptic curve of conductor N < 5000 and p is a prime 
such that E[p] is reducible, i.e., there is a p-isogeny : E —> E' . If p < 5 or E is 
a rank curve with complex multiplication, results of the previous sections show 
that BSD(E,p) is true. This leaves 464 pairs (E,p). By results in [30], BSD(lla, 5) 
is true, leaving 463 pairs. The results of Theorem l5.3l can be applied to 339 of these 
curve-prime pairs, using Corollary 14.81 and various descents, including [18] . This 
leaves 124 pairs of the original 464: 103 5-isogenies, 16 7-isogenies, 2 11-isogenies, 
and one isogeny each of degree 19, 43 and 67. There are also two cases with rank 2, 
namely (E,p) e {(26011, 5), (3328d, 5)}. Of the 122 rank and 1 cases remaining, 
103 more at p — 5 and p = 7 are covered in [17] . 

Of the nineteen remaining cases, eight are proven in a paper by Michael Stoll 
and the author [33] . The eleven remaining are listed in Table [9j if (E, p) does 
not appear in Table [9j for E\p] reducible, then BSD(£',p) is true. For 5-isogenies 
involving 5-torsion in LU (eight cases), one curve has trivial III in each case, and 
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Table 9. Remaining curves: reducible representations 
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E 


P 


E 


P 


546f 


7 


1938j 


5 


5701 


5 


1950y 


5 


858k 


7 


2550be 


5 


870i 


5 


2370m 


5 


1050o 


5 


3270h 


5 


1230k 


7 







a full 5-descent on that curve involves number fields of degree at most 20. For 7- 
isogenies involving 7-torsion in III (three cases), similarly one curve has trivial III 
but a full 7-descent on that curve involves number fields of degree 28. Extending 
a 7-isogeny descent to a second descent and thus obtaining a full 7-descent would 
resolve these last three cases. 
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